Design/Logic Flaw

2019-05-1421:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.7%

JSON

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter.

CPENameOperatorVersion
.net_frameworkeq4.5
rapid4eq4.5.10923

CPE	Name	Operator	Version
	.net_framework	eq	4.5
	rapid4	eq	4.5.10923

References

rapidflows.com/

medium.com/%40javarmutt/rapid4-local-file-inclusion-0day-151c830ac74a